Enterprise infrastructure from scratch
4 sites in 2 countries · 100–200 users · 50+ servers · mail, AD, networking and certs, solo
What was built
Four sites, two countries. Empty field at the start. I stood up AD, Exchange with a DAG across sites, mail through PMG with HAProxy and SNI routing. Routing itself on WireGuard + GRE + OSPF over MikroTik RouterOS 7. Certificates issue and reach Exchange on their own. Message tracking good enough to take an incident apart. BookStack so the whole thing is written down. Built it solo, start to finish.
Stack
Exchange + DAGPMGHAProxy + SNIMikroTik RouterOS 7WireGuard + GREOSPF + FRRACME → Exchange
Other work
- Single source of truth for infrastructure
- 2FA / SSO for mail on Keycloak + ANGIE
- Managed corporate access client
- Internal certificate authority with ACME
- Report access gateway on directory groups
- Workplace self-service: software and VDI
- Active Directory hygiene: GPO repair
- Active Directory modernization
- Zabbix + Grafana and automation
- Office-to-DC networking
- Virtualization and vCenter
- Distributed Veeam and DRP
- Infrastructure Q&A agent over MCP
- Multi-agent workflow for solo development
- LLM call analysis and BI/CRM pipeline